> ## Documentation Index
> Fetch the complete documentation index at: https://synthetiq.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# OAuth

> Built-in OAuth 2.0 provider for external application authentication

Each app acts as its own OAuth 2.0 provider, allowing external applications to authenticate users and consume the app's API.

* Authorization code flow with PKCE support
* Pluggable identity providers (Synthetiq, Google, GitHub, any OIDC provider)
* OAuth client management via the built-in admin UI
* Token refresh and revocation

Users register their own OAuth applications at `/settings/oauth-apps`. Admins manage all OAuth clients at `/admin/oauth-clients`.

After creating an OAuth application, the user receives a **client ID** and **client secret**. These credentials are used to configure the OAuth flow in whatever third-party tool or service is consuming the app's [HTTP API](/docs/platform-docs/app-framework/headless/http-api) or [MCP server](/docs/platform-docs/app-framework/headless/mcp).

For more detail on creating and managing OAuth connections in a deployed app, see [OAuth connections](/docs/platform-docs/deployments/administration/oauth-connections).